rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	0-...!: (0 ticks this GP) idle=9ecc/1/0x4000000000000000 softirq=38542/38542 fqs=0
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P9120/1:b..l P1145/1:b..l
rcu: 	(detected by 1, t=10502 jiffies, g=33221, q=94 ncpus=2)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 9151 Comm: syz.1.774 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:debug_spin_unlock kernel/locking/spinlock_debug.c:102 [inline]
RIP: 0010:do_raw_spin_unlock+0x7b/0x240 kernel/locking/spinlock_debug.c:141
Code: c1 e8 03 42 0f b6 04 20 84 c0 0f 85 74 01 00 00 83 3b 00 0f 84 ea 00 00 00 4c 8d 73 10 4d 89 f5 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 f7 e8 9b a2 85 00 65 48 8b 04 25 08 b0 9f 92 49 39 06
RSP: 0018:ffffc90000007c68 EFLAGS: 00000046
RAX: 0000000000000000 RBX: ffff8880b8627ac0 RCX: ffffffff819e539d
RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b8627ac0
RBP: ffffc90000007d30 R08: ffff8880b8627ac3 R09: 1ffff110170c4f58
R10: dffffc0000000000 R11: ffffed10170c4f59 R12: dffffc0000000000
R13: 1ffff110170c4f5a R14: ffff8880b8627ad0 R15: 1ffff92000000f94
FS:  00007f1a2cab76c0(0000) GS:ffff888125c25000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000002000 CR3: 000000001ded2000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:150 [inline]
 _raw_spin_unlock_irqrestore+0x78/0x110 kernel/locking/spinlock.c:194
 __run_hrtimer kernel/time/hrtimer.c:1757 [inline]
 __hrtimer_run_queues+0x408/0xc60 kernel/time/hrtimer.c:1825
 hrtimer_interrupt+0x45b/0xaa0 kernel/time/hrtimer.c:1887
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline]
 __sysvec_apic_timer_interrupt+0x10b/0x410 arch/x86/kernel/apic/apic.c:1056
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1050
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 kernel/locking/spinlock.c:194
Code: 74 05 e8 7b 5a 57 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> f3 47 20 f6 65 8b 05 0c ab 2f 07 85 c0 74 40 48 c7 04 24 0e 36
RSP: 0018:ffffc90003ebf900 EFLAGS: 00000206
RAX: ad551d8f7e207300 RBX: 0000000000000a02 RCX: ad551d8f7e207300
RDX: 0000000000000000 RSI: ffffffff8d991910 RDI: 0000000000000001
RBP: ffffc90003ebf990 R08: ffffffff8fa18cf7 R09: 1ffffffff1f4319e
R10: dffffc0000000000 R11: fffffbfff1f4319f R12: dffffc0000000000
R13: ffff888033a9f820 R14: ffff88802f742a38 R15: 1ffff920007d7f20
 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]
 snd_rawmidi_kernel_write1+0x4bc/0x650 sound/core/rawmidi.c:1574
 snd_rawmidi_write+0x5ad/0xbd0 sound/core/rawmidi.c:1629
 do_loop_readv_writev fs/read_write.c:850 [inline]
 vfs_writev+0x4b6/0x960 fs/read_write.c:1059
 do_writev+0x14d/0x2d0 fs/read_write.c:1103
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1a2bb8e929
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1a2cab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
RAX: ffffffffffffffda RBX: 00007f1a2bdb5fa0 RCX: 00007f1a2bb8e929
RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004
RBP: 00007f1a2bc10b39 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f1a2bdb5fa0 R15: 00007ffc10f665a8
 </TASK>
task:kworker/u8:6    state:R  running task     stack:20536 pid:1145  tgid:1145  ppid:2      task_flags:0x4208060 flags:0x00004000
Workqueue: bat_events batadv_nc_worker
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5313 [inline]
 __schedule+0x16f5/0x4d00 kernel/sched/core.c:6696
 preempt_schedule_notrace+0xd1/0x110 kernel/sched/core.c:6969
 preempt_schedule_notrace_thunk+0x16/0x30 arch/x86/entry/thunk.S:13
 rcu_is_watching+0x7f/0xb0 kernel/rcu/tree.c:752
 trace_lock_release include/trace/events/lock.h:69 [inline]
 lock_release+0x4b/0x3e0 kernel/locking/lockdep.c:5882
 rcu_lock_release include/linux/rcupdate.h:341 [inline]
 rcu_read_unlock include/linux/rcupdate.h:871 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline]
 batadv_nc_worker+0x28c/0x610 net/batman-adv/network-coding.c:719
 process_one_work kernel/workqueue.c:3239 [inline]
 process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3322
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3403
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
task:syz.5.765       state:R  running task     stack:23400 pid:9120  tgid:9119  ppid:6213   task_flags:0x400140 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5313 [inline]
 __schedule+0x16f5/0x4d00 kernel/sched/core.c:6696
 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7019
 irqentry_exit+0x6f/0x90 kernel/entry/common.c:307
 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707
RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:99 [inline]
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:227 [inline]
RIP: 0010:unwind_next_frame+0x1334/0x2390 arch/x86/kernel/unwind_orc.c:494
Code: 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 0f 47 d8 4d 0f 46 ef 48 39 dd 76 a2 <e9> 7b ef ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 7c cc 4c 89 ff 48
RSP: 0000:ffffc90003eae8b8 EFLAGS: 00000202
RAX: ffffffff8fbda15c RBX: ffffffff8fbda160 RCX: ffffffff8fbda164
RDX: ffffffff8fbda160 RSI: ffffffff903d58c8 RDI: ffffffff8be32260
RBP: ffffffff8fbda164 R08: 0000000000000008 R09: ffffffff81729c65
R10: ffffc90003eae9d8 R11: ffffffff81ac7670 R12: ffffffff82190480
R13: ffffffff8fbda160 R14: ffffc90003eae988 R15: ffffffff8fbda160
 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:47 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:68
 unpoison_slab_object mm/kasan/common.c:319 [inline]
 __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:345
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4180 [inline]
 slab_alloc_node mm/slub.c:4229 [inline]
 kmem_cache_alloc_noprof+0x1c1/0x3c0 mm/slub.c:4236
 mempool_alloc_noprof+0x1a4/0x510 mm/mempool.c:402
 bvec_alloc block/bio.c:210 [inline]
 bio_alloc_bioset+0x3b4/0x1110 block/bio.c:570
 __bio_alloc+0x518/0xa50 fs/f2fs/data.c:464
 f2fs_submit_page_write+0xc49/0x20c0 fs/f2fs/data.c:1003
 f2fs_do_write_meta_page+0x1f0/0x4b0 fs/f2fs/segment.c:3984
 __f2fs_write_meta_folio+0x1f3/0x4e0 fs/f2fs/checkpoint.c:363
 commit_checkpoint fs/f2fs/checkpoint.c:1411 [inline]
 do_checkpoint+0x232b/0x3e40 fs/f2fs/checkpoint.c:1570
 f2fs_write_checkpoint+0x15bb/0x1df0 fs/f2fs/checkpoint.c:1684
 f2fs_disable_checkpoint+0x43c/0x6c0 fs/f2fs/super.c:2290
 f2fs_fill_super+0x6016/0x6c80 fs/f2fs/super.c:4915
 mount_bdev+0x20e/0x2c0 fs/super.c:1738
 legacy_get_tree+0xfa/0x1a0 fs/fs_context.c:666
 vfs_get_tree+0x92/0x2b0 fs/super.c:1804
 do_new_mount+0x24a/0xa40 fs/namespace.c:3902
 do_mount fs/namespace.c:4239 [inline]
 __do_sys_mount fs/namespace.c:4450 [inline]
 __se_sys_mount+0x317/0x410 fs/namespace.c:4427
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f13457900ca
RSP: 002b:00007f13466a9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f13466a9ef0 RCX: 00007f13457900ca
RDX: 00002000000002c0 RSI: 0000200000000100 RDI: 00007f13466a9eb0
RBP: 00002000000002c0 R08: 00007f13466a9ef0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000100
R13: 00007f13466a9eb0 R14: 0000000000005505 R15: 00002000000005c0
 </TASK>
rcu: rcu_preempt kthread starved for 10502 jiffies! g33221 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27128 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5313 [inline]
 __schedule+0x16f5/0x4d00 kernel/sched/core.c:6696
 __schedule_loop kernel/sched/core.c:6774 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6789
 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2060
 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2262
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 9157 Comm: syz.1.774 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:csd_lock_wait kernel/smp.c:340 [inline]
RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 kernel/smp.c:885
Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 50 69 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 fb 64 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 e0 64 0b
RSP: 0000:ffffc90003a57720 EFLAGS: 00000246
RAX: ffffffff81b46800 RBX: ffff8880b873b180 RCX: 0000000000080000
RDX: ffffc90010139000 RSI: 000000000007ffff RDI: 0000000000080000
RBP: ffffc90003a57880 R08: ffffffff8fa18cf7 R09: 1ffffffff1f4319e
R10: dffffc0000000000 R11: fffffbfff1f4319f R12: 1ffff110170c8339
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b86419c8
FS:  00007f1a2ca546c0(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1a21000400 CR3: 000000001ded2000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1052
 __flush_tlb_multi arch/x86/include/asm/paravirt.h:91 [inline]
 flush_tlb_multi arch/x86/mm/tlb.c:1361 [inline]
 flush_tlb_mm_range+0x6b1/0x12c0 arch/x86/mm/tlb.c:1451
 flush_tlb_page arch/x86/include/asm/tlbflush.h:324 [inline]
 ptep_clear_flush+0x120/0x170 mm/pgtable-generic.c:101
 wp_page_copy mm/memory.c:3653 [inline]
 do_wp_page+0x1bc2/0x5800 mm/memory.c:4048
 handle_pte_fault mm/memory.c:6103 [inline]
 __handle_mm_fault+0x1144/0x5620 mm/memory.c:6230
 handle_mm_fault+0x40a/0x8e0 mm/memory.c:6399
 do_user_addr_fault+0xa81/0x1390 arch/x86/mm/fault.c:1336
 handle_page_fault arch/x86/mm/fault.c:1476 [inline]
 exc_page_fault+0x76/0xf0 arch/x86/mm/fault.c:1532
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f1a2ba50ca3
Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
RSP: 002b:00007f1a2ca534a0 EFLAGS: 00010202
RAX: 0000000000000400 RBX: 00007f1a2ca53540 RCX: 00007f1a21000000
RDX: 00007f1a2ca536e0 RSI: 0000000000000029 RDI: 00007f1a2ca535e0
RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001a0
R10: 00000000000001c0 R11: 00007f1a2ca53540 R12: 0000000000000001
R13: 00007f1a2bc2c120 R14: 0000000000000020 R15: 00007f1a2ca535e0
 </TASK>